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(54) Secret information indentification system 

(57) In a secret information identification system, an 
Input password (PWi^) is compared with a registered 
password (PWreq) every time a permission signal (Sj) 
is generated. Lock release permission is given when a 
comparison result (Scomp) indicates coincidence. Alter- 
natively, an input password is compared with a regis- 
tered password and lock release permission is given 
every time a permission signal is generated when the 



comparison indicates coincidence. The cycle of genera- 
tion of the permission signal is elongated as the number 
of events of non-coincidence in comparison results 
increases. As a result, the password is not easily bro- 
ken, and further the password input function is not 
locked even after input of a wrong password. 
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Description 

The present invention relates to persona! informa- 
tion identification systems and, more specifically, to an 
identification system which verifies input secret informa- 
tion. 

In automatic teller machines and the like installed in 
banking organs, a user is authenticated by his inputting 
secret data such as a password, whereby use of his 
account, for instance, by other persons is prohibited. 
That is, in this type of system, an input password is com- 
pared with a preset password and a machine is allowed 
to start operating when the two passwords coincide with 
each other. In such a system, a preset password is gen- 
erally a fixed one. There are known several types of the 
system including a first type system which allows a user 
to input passwords a limitless number of times and 
another type system in which a password input function 
is locked, i.e., disabled if passwords are input more than 
a given number of times (refer to Japanese Unexamined 
Patent Publication No. 62-219048). 

The above-described conventional systems have 
the following disadvantages. In the first type system 
which allows a user to input passwords a limitless 
number of times, a password is likely broken by using a 
computer, for instance. In the other type system in 
which a password input function is locked to disable 
subsequent password inputs if passwords are irput 
more than a given number of times, the password Input 
function Is locked when wrong passwords are input 
inadvertently, in which case even the true user is prohib- 
ited from using the machine. 

The present invention has been made to solve the 
above problems in the art, and therefore an object of the 
present invention is to provide a system where a secret 
information is hard to break and an information input 
function is not locked. 

According to the present invention, a system for 
providing authorization by checking whether input infor- 
mation is coincident with predetermined information. 
Includes a first controller which varies permission timing 
based on a check result of the input information and a 
second controller which provides the authorization 
when the check result indicates coincidence at the per- 
mission timing. The first controller may elongate an 
interval of the permission timing based on the check 
result of the input information. Preferably, the first con- 
troller may elongate the interval of the permission timing 
as the number of check results indicating non-coinci- 
dence increases. Further, the first controller may ran- 
domly vary an interval of the permission timing based 
on the check result of the input information. 

According to an aspect of the present invention, the 
input information is compared with the predetermined 
information every time the permission signal is gener- 
ated and. when a comparison result indicates coinci- 
dence, the authorization such as lock release is 
provided. The cycle or interval of generation of the per- 
mission signal is varied according to the number of 
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events of non-coincidence in comparison results. 

According to another aspect of the invention, the 
input information is compared with the predetermined 
information, and the authorization is given in response 
5 to generation of the permission signal when a compari- 
son result indicates coincidence. The interval or cycle of 
generation of the permission signal is varied according 
to the number of events of non-coincidence in compari- 
son results. 

10 Therefore, even If all possible secret information are 
Input, coincidence does not occur. This provides an 
advantage that the secret information is not easily bro- 
ken even with the use of a computer or the like. Further, 
according to the invention, the secret information input 

75 function is not locked. This provides another advantage 
that even after input of incorrect information, the lock of 
a system can still be released by inputting the predeter- 
mined information. 

The above and other objects and advantages will 

20 become apparent from the following detailed descrip- 
tion when read in conjunction with the accompanying 
drawings wherein: 

FIG. 1 is a block diagram showing the configuration 
25 of a password identification system according to an 

embodiment of the present invention; 

FIG. 2 is a flowchart showing an operation of the 

password identification system of FIG. 1 ; 

FIG. 3 is a time chart showing an example of the 
30 operation of the password identification system of 

FIG. 1: 

FIG. 4 is a time chart showing another example of 
the operation of the password information identifi- 
cation system of FIG. 1 ; 

35 FIG. 5 is a block diagram showing the configuration 
of a password identification system according to 
another embodiment of the invention; 
FIG. 6 is a flowchart showing an operation of the 
password information identification system of FIG. 

40 5; 

FIG. 7 is a time chart showing an example of the 
operation of the password information identification 
system of FIG. 5; 

FIG. 8 is a time chart showing another example of 
45 the operation of the password information identifi- 
cation system of FIG. 5; 

FIG. 9 is a detailed block diagram showing a first 
example of a permission signal generator of FIG. 1 
or FIG. 5; 

50 FIG. 10 is time a chart showing an operation of the 
permission signal generator of FIG. 9; and 
FIG. 11 is a detailed block diagram showing a sec- 
ond example of the permission signal generator of 
FIG. 1 or FIG. 5;. 

55 

Referring to FIG. 1, a password identification sys- 
tem according to an embodiment of the present inven- 
tion has the following configuration. An input device 1 01 
such as a keypad allows a user to input a password 
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PW||sj and other necessary information. A check permit- 
ting section 1 02 transfers the input password PW,n to a 
checking section 103 in response to a permission signal 
St- In other words, the check permitting section 102 has 
a function of permitting a checking operation in 5 
response to the permission signal Sj. The checking 
section 103 checks the input password PW,fg by com- 
paring it with a registered password PWreg previously 
stored in a memory 104. When the comparison result is 
' coincidence," a lock controller 105 releases the lock of w 
a system 106. A permission signal generator 107 
receives the comparison result from the checking sec- 
tion 103 and generates the permission signal Sj with 
varying the cycle of generation of the permission signal 
St based on the comparison result, 75 

The permission signal generator 107 includes a 
consecutive-error counter 108 which counts the number 
of consecutive comparison results of "non-coincidence" 
received from the checking section 103. A generation 
interval controller 109 controls the generation interval 20 
(or cycle) of the permission signal Sj in accordance 
with the count of the counter 108 as will be described 
later. A signal generator 110 generates the permission 
signal Sj under the control of the controller 109 and 
supplies it to the check permitting section 102. 25 

Referring to FIG. 2. the permission signal generator 
107 generates permission signals Sj as trigger signals 
for permitting the checking operation. Normally, the per- 
mission signal generator 107 generates permission sig- 
nals St at minimum intervals. When a password PW|n is 30 
input through the input device 101 (step S201). the 
check permitting section 102 waits for generation of a 
permission signal Sj by the permission signal generator 
107 (step S202). When a permission signal St is 
detected (YES at step S202). the checking section 103 35 
compares the input password PWin with the registered 
password PWr^q stored in advance in the memory 104 
(step S203). If the comparison result is "coincidence," 
the generation interval of the permission signals St is 
minimized (step S204) and then the lock controller 105 40 
operates to release the lock of the system 106 (step 
S205), thereby allowing it to operate (step S206). 

On the other hand, if the input password PWi^ is 
different from the registered password PWr^q, the 
checking section 103 detects non-coincidence (step 45 
S203). The consecutive-error counter 108 of the per- 
. mission signal generator 107 counts consecutive errors 
in input passwords, and the generation interval control- 
ler 109 sets a permission signal generation interval in 
accordance with the count of the counter 108 (step so 
S207). In this embodiment, the permission signal gen- 
eration interval (cycle) is elongated as the count 
increases. The signal generator 110 generates permis- 
sion signals St at the thus-set cycle or interval. 

In this state where the permission signal generation 55 
interval (cycle) ha been elongated, even if a password 
PW|f42 is again input after a lapse of a short time, the 
check permitting section 1 02 does not permit the check- 
ing operation of the checking section 103 because no 



7A2 




permission signal is generated due to the elongated 
permission signal generation interval. A user is not 
given any permission signal generation information. 
When he further inputs a password PW(N3 and a per- 
mission signal St is then generated after a lapse of the 
permission signal generation interval, the check permit- 
ting section 102 permits the checking operation in the 
checking section 103 (YES at step S202). In response, 
the checking section 103 compares the input password 
PW|N3 with the registered password PWreg (step 

5203) . The fact that the input password PW|n2 is not 
subjected to checking is the important feature of this 
system. That is, even if the input password P\N\m a 
registered one, the system 106 is not allowed to oper- 
ate. 

If non-coincidence is again detected with an input 
password PWi^s. the count of consecutive errors is 
incremented by one. As a result, the generation interval 
controller 109 further elongates the permission signal 
generation interval (step S207). which means that the 
non-operational time of the checking section 103 is 
elongated accordingly. If coincidence is detected with 
the input password PW1N3, the permission signal gener- 
ation interval is set at the minimum value (step S204). 
the lock is released (step S205). and the system 106 is 
allowed to operate (step S206). 

A consideration will be given to a case where a reg- 
istered password is input once after N times of input of 
wrong passwords. In this case, permission signals St 
are generated at permission signal generation intervals 
corresponding to the number N of consecutive errors. 
When a registered password PWr^q 's input and the 
check permitting section 102 receives a permission sig- 
nal Sj that is generated after a lapse of the permission 
signal generation inten/al that corresponds to the 
number N of consecutive en-ors, the check permitting 
section 102 outputs the input password PW|n to the 
checking section 103 to permit the checking operation. 
When the checking section 103 compares the input 
password PWin with the registered password PWreg 
and detects coincidence, the permission signal genera- 
tion Interval is returned to the minimum value (step 

5204) . the lock is released (step S205). and the system 
106 is allowed to operate (step 8206). 

Next, the permission signal generation interval will 
be described with reference to time charts of FIGS. 3 
and 4. Each of FIGS. 3 and 4 shows input passwords 
PW|N. permission signal St. comparison outputs indi- 
cating a comparison result (coincidence or non-coinci- 
dence) of the checking section 103. and lock releasing 
signal Srl which is output from the lock controller 105. 
In each of FIGS. 3 and 4, the horizontal axis represents 
time while solid segments of the comparison outputs 
and the lock releasing signals Srl represent active 
states and the remaining portions represent inactive 
states. 

In the permission signals St of FIG. 3(b), permis- 
sion is indicated by a high level. The permission signals 
St of FIG. 4(b) are used as triggers and operations are 
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effected at the rising edges of the triggers. While no 
password is input, the checking operation is not per- 
formed even if a permission signal Sy is generated. In 
this example, to simplify the description, it is assumed 
that the registered password PWreg 's "6" and input of 
only passwords PW,n ranging from "0" to "9" is 
accepted. 

Referring to FIG. 3, in the normal state in which the 
permission signal generation interval is set to a mini- 
mum value ("0" in this example), the lock is released 
and the system 1 06 is allowed to operate as soon as the 
registered password PWreq of "6" is input. 

A consideration will be given to a case where a user 
who intends to break the password inputs all passwords 
"0" to "9" on a try-everything basis. When a first pass- 
word PW|Ni of "0" is input, the checking section 103 
detects non-coincidence and the number of consecutive 
errors becomes 1. As a result, the permission signal 
generation interval, which was "0" in the initial state, 
becomes "1." When a next password PW,n2 of "1" is 
input, the checking operation is not performed because 
no permission signal Sy is generated. Since the user is 
not given the permission signal generation information, 
he inputs a next password PW,n3 of "2." Since a permis- 
sion signal Sj is generated thereafter, the input pass- 
word is conpared with the registered password PWreg 
As a result, non-coincidence is again detected, whereby 
the number of consecutive errors becomes 2 and the 
permission signal generation interval also becomes *'2." 

When next passwords PW,n4 and PWi^s (i.e.. "3" 
and ••4") are sequentially input, the checking operation 
is hot performed because no permission signals are 
generated. When a further next password PW,n6 of "5" 
is input, a permission signal Sj is generated thereafter 
and hence the input password PWi^e is subjected to the 
checking operation. Since non-coincidence is detected, 
the number of consecutive errors becomes 3 and the 
permission signal generation interval becomes "3." 

Although a registered password PWj^y of "6" is 
input next, the checking section 103 does not performs 
its checking operation because no permission signal Sj 
Is generated. Subsequently, passwords PW|N8 to 
PW|Nio of **7" to "9" are sequentially input. Since a per- 
mission signal Sj is generated after the input of the 
password PW,nio of *'9." only that password is sub- 
jected to the checking operation. Since non-coincidence 
is again detected, the number of consecutive errors 
becomes 4 and the permission signal generation inter- 
val becomes "4." Thereafter, the checking section 103 
does not operate while no password input is made. 
Therefore, neither coincidence nor non-coincidence is 
detected and the permission signal generation interval 
is kept at "4." 

Even when a registered password P\N^^^^^ of "6" is 
thereafter input, the checking operation is not per- 
formed until generation of a permission signal Sj. The 
checking section 103 performs Its checking operation 
when a permission signal Sj is generated at time T1 
after a lapse of a permission signal generation interval 
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"4." Since password coincidence is detected at that 
time, the lock is released and the system 106 is allowed 

to operate. 

Referring to FIG. 4. as in the case of the example of 
FIG. 3, in the normal state, the permission signal gener- 
ation interval is set to the minimum value. In this exam- 
ple, the permission signal Sj is generated as a trigger 
signal with rising consecutively. If a registered password 
PWreg oi "6" is input in this state, the lock is released 
immediately and the system 106 is allowed to operate. 

In the case where a user who intends to break the 
password inputs all passwords "0" to "9" on a try-every- 
thing basis, as in the case of the example of FIG. 3, the 
permission signal generation interval is elongated as 
the number of consecutive events of non-coincidence in 
comparison results increases. After the number of con- 
secutive errors becomes 4 and the permission signal 
generation interval becomes "4". the checking section 
103 does not operate while no password input is made. 
Therefore, neither coincidence nor non-coincidence is 
detected and the permission signal generation interval 
is kept at "4." 

Even when a registered password PW,nii of "6" Is 
thereafter input, the checking operation is not per- 
formed until generation of a permission signal Sj. The 
checking section 103 performs its checking operation 
when a permission signal Sj is generated at time T1 
after a lapse of a permission signal generation interval 
"4." Since password coincidence is detected at that 
time, the lock is released and the system 106 Is allowed 
to operate. 

Referring to FIG. 5. a password identification sys- 
tem according to another embodiment of the invention 
has the following configuration. An input device 301 
such as a keypad allows a user to input a password 
PW(N and other necessary information. The password 
PW,N is output to a checking section 302 which checks 
the input password PW,n by comparing it w'rth a regis- 
tered password PWr^q previously stored in a memory 
303. The comparison result of the checking section 302 
is output to a lock release permitting section 304 and a 
permission signal generator 307. The lock release per- 
mitting section 304 outputs a lock release permission 
signal to a lock controller 305 in response to the com- 
parison result of "coincidence" and a permission signal 
Sj. In other words, the lock release permitting section 
304 has a function of permitting lock release in 
response to the comparison result and the permission 
signal Sj. when receiving the lock release permission 
signal from the lock release permitting section 304. the 
lock controller 305 releases the lock of a system 306. 
The permission signal generator 307 receives the com- 
parison result from the checking section 302 and gener- 
ates the permission signal St with varying the cycle of 
generation of the permission signal Sj based on the 
comparison result. 

The permission signal generator 307 includes a 
consecutive-error counter 308 which counts the number 
of consecutive comparison results of "non-coincidence" 
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received from tPie checking section 302. A generation 
interval controller 309 controls the generation interval 
(or cycle) of the permission signal in accordance 
with the count of the counter 308 as will be described 
later. A signal generator 310 generates the permission 
signal Sj under the control of the controller 309 and 
supplies it to the lock release permitting section 304. 

Referring to FIG. 6, the permission signal generator 
307 generates permission signals Sj as trigger signals 
for permitting the lock release operation. Normally, the 
permission signal generator 307 generates permission 
signals Sj at minimum intervals. When a password 
PW,N is input through the input device 301 (step S401). 
the checking section 302 compares the input password 
PW|N with a registered password PWreq stored in 
advance in the memory 303 (step S402). If the compar- 
ison result is "coincidence," the lock release permitting 
section 304 waits for generation of a permission signal 
Sj by the permission signal generator 307 (step S403). 
When a permission signal Sj is received (YES at step 
S403), after the permission signal generation interval is 
reset to the minimum value (step S404). the lock 
release permitting section 304 outputs the lock release 
permission signal to the lock controller 305. The lock 
controller 305, in response to the lock release permis- 
sion signal, operates to release the lock of the system 
306 (step S405). thereby allowing It to operate (step 

5406) . 

On the other hand, if the Input password PW|n is 
different from the registered password PWreg. the 
checking section 302 detects non-coincidence (step 
S402). The consecutive-error counter 308 of the per- 
mission signal generator 307 counts errors in input 
passwords, and the generation Interval controller 309 
sets a permission signal generation interval In accord- 
ance with the count of the counter 308. The signal gen- 
erator 310 generates the permission signal Sj whose 
generation interval (cycle) is elongated in accordance 
with the set permission signal generation interval (step 

5407) . 

If a password PW|ivi2 Is input in this state and non- 
coincidence is detected, the error count is incremented 
by one and hence the permission signal generation 
interval is further elongated. On the other hand, even if 
coincidence is detected in this state, the lock release 
permitting section 304 does not immediately permit lock 
. release because no permission signal Is generated due 
to the elongated permission signal generation interval. 

A user is not given any permission signal genera- 
tion information. When he further inputs a password 
PW||^3. the checking operation is performed, and a per- 
mission signal Sj is then generated after a lapse of the 
permission signal generation Interval. If a comparison 
result of the password P Wi^a is "non-coincidence", con- 
trol returns to the password input waiting state (step 
S401). If the comparison result is "coincidence." the 
permission signal generation interval Is made the mini- 
mum value (step S404), the lock is released (step 
S405), and the system 306 is allowed to operate. The 



fact that as described above the lock is not released 
even if the input password PW|n2 is a registered one 
and the comparison result is "coincidence" is the impor- 
tant feature of this system. If non-coincidence is again 

5 detected with an input password PW|N3. the error count 
is incremented by one. As a result, the permission sig- 
nal generation Interval is further elongated, which 
means that the lock release prohibition time Is elon- 
gated accordingly. 

10 A consideration will be given to a case where a reg- 
istered password is Input once after N times of input of 
wrong passwords. In this case, permission signals Sj 
are generated at permission signal generation intervals 
corresponding to the number N of errors. When a regis- 

15 tered password PWreq input, the checking section 
302 detects coincidence and the lock release permitting 
section 304 detects a permission signal Sj that is gen- 
erated after a lapse of the permission signal generation 
interval that corresponds to the number N of errors and 

20 permits the lock release operation. Then, the permis- 
sion signal generation Interval Is returned to the mini- 
mum value (step S404), the lock is released (step 

5405) . and the system 306 is allowed to operate (step 

5406) . 

25 Next, the permission signal generation interval will 
be described with reference to time charts of FIGS. 7 
and 8. Each of FIGS. 7 and 8 show Input passwords 
PW|N, permission signals Sj. comparison outputs indi- 
cating comparison results of the checking section 302, 

30 and lock release signals Srl which are output from the 
lock controller 305. In each of FIGS. 7 and 8. the hori- 
zontal axis represents time while solid segments of the 
comparison outputs and the lock release signals Srl 
represent active states and broken lines represent inac- 

35 five states. 

In the permission signals Sj of FIG. 7(b). permis- 
sion is indicated by a high level. The permission signals 
Sj of FIG. 8(b) are used as triggers and operations are 
effected at the rising edges of the triggers. While no 

40 password is input, the checking operation is not per- 
formed. In this example, to simplify the description, it is 
assumed that the registered password PWr^q Is "6" 
and input of only passwords PW|n of "0" to "9" is 
accepted. 

45 Referring to FIG. 7, in the normal state in which the 
permission signal generation interval is set to a mini- 
mum value ("0" in this example), the lock is released 
and the system 306 is allowed to operate as soon as the 
registered password PWreq of "6" is input. 

50 A consideration will be given to a case where a user 
who intends to break the password inputs all passwords 
"0" to "9". on a try-everything t>asis- When a first pass- 
word PWiM of "0" is input, the checking section 302 
detects non-coincidence and the number of errors 

55 becomes 1 . As a result, the permission signal genera- 
tion interval, which was "0" in the initial state, becomes 
"1." When a next password PW,n of "1" Is Input, the 
checking section 302 detects non-coincidence and 
hence the number of errors becomes 2 and the permis- 
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sion signal generation interval becomes "2." Then, 
passwords PW,n of "3" to "5" are sequentially input, so 
that the number of errors becomes 6 and the permis- 
sion signal generation interval becomes "6." 

When a registered password PW|fg of "6" is input 
subsequently, the checking section 302 detects coinci- 
dence. However, since no permission signal Sj is gen- 
erated, the lock release permitting section 304 does not 
permit lock release. Subsequently, passwords PWi^ of 
"7" to "9 " are sequentially input, so that the number of 
errors becomes 9 and the permission signal generation 
interval becomes "9." Thereafter, the checking section 
302 does not operate while no password input is made. 
Therefore, neither coincidence nor non-coincidence is 
detected and the permission signal generation interval 
is kept at "9." 

When a registered password PW|n of "6" is thereaf- 
ter input, coincidence is detected but the lock is not 
released until generation of a permission signal Sj. 
When a permission signal Sy is generated at time T2 
after a lapse of a permission signal generation Interval 
"9." the permission signal generation interval is made 
the minimum value, the lock is released, and the system 
306 is allowed to operate. 

Referring to FIG. 8. as in the case of the example of 
FIG. 7. in the normal state the permission signal gener- 
ation interval is minimum and permission signals Sj rise 
consecutively at minimum intervals. If a registered pass- 
word PWreg of "6" is input in this state, the lock is 
released immediately and the system 306 Is allowed to 
operate. 

A consideration will be given to a case where a user 
who intends to break the password inputs all passwords 
"0" to "9" on a try-everything basis. In this case, as in the 
case of the example of FIG. 7. the permission signal 
generation interval is elongated as the number of events 
of non-coincidence in comparison results increases. 
After the number of errors becomes 9 and the permis- 
sion signal generation interval becomes "9", the check- 
ing section 302 does not operate while no password 
input is made. Since neither coincidence nor non-coin- 
cidence is detected, the permission signal generation 
imerval is kept at "9." 

When a registered password PWr^q of "6" is there- 
after input, coincidence is detected but the lock is not 
released while no permission signal Sj is generated. 
When a permission signal Sj is generated at time T2 
after a lapse of a permission signal generation interval 
"9", the permission signal generation interval is made 
the minimum value, the lock Is released, and the system 
306 is allowed to operate. 

Referring to FIG. 9. the permission signal generator 
107 or 307 may be constituted of the following corrpo- 
nents, for example. A reference oscillator 501 outputs a 
reference clock signal CLK to a counter 502. The coun- 
ter 502 performs a counting operation in response to 
clock pulses of the reference clock signal CLK. A logic 
circuit 503 receives the outputs of the counter 502 and 
generates clock signals Sjo to 872 of different cycles 



based on the count outputs of the counter 502. A coun- 
ter 505 receives the non-coincidence signal from the 
checking section 103 or 302 and outputs the number 
of errors by counting the number of non-coincidence 
5 events. Further, the counter 505 receives the lock 
release signal Srl as a count reset signal from the lock 
controller 1 05 or 305. Alternatively, the lock release per- 
mission signal may be received from the lock release 
permitting section 304 in the embodiment as shown in 
10 FIG. 5. A selector 504 selects one of the clock signals 
Sto to in accordance with the number of errors 
and outputs the selected one as a permission signal Sj 
to the check permitting section 102 or the lock release 
permitting section 304. 
15 The logic circuit 503 consists of a NAND gate 
NAND1 having inverted outputs QO" and QT of the 
counter 502 as inputs and another NAND gate NAND2 
having inverted outputs qT and Qr of the counter 
502 as inputs. The NAND gates NAND1 and NAND2 
20 output the clock signals Sji and 8^2 to the selector 504. 
An Inverted output QoT of the counter 502 is also sup- 
plied to the selector 504 as the clock signal Sjq. 

The counter 502 and the logic circuit 503 generate 
a plurality of clock signals Sjo to 872 having different 
25 periods from the reference clock CLK. The selector 504 
selects one of the clock signals Sjq to 872 according to 
the number NE of errors which is counted by the coun- 
ter 505- The non-coincidence signal, which is one of two 
comparison results of the checking section 103 or 302. 
30 is supplied to the counter 505 as a clock signal. A signal 
for setting the permission signal generation interval at 
the minimum value, such as a lock releasing signal Srl. 
is also supplied to the counter 505 as a reset signal. In 
this manner, the function of setting the permission sig- 
35 nal generation . interval at the minimum value when the 
comparison result is "coincidence" (step S204 in FIG. 2 
or step 8404 In FIG. 6) is realized. 

As shown in FIG. 10, in this example, the selector 



504 receives three kinds of waveforms Sto S 



^T2- 



40 When the number of errors is 0 (normal state), a tim- 
ing clock signal Sjo having a given cycle is selected as 
the permission signal Sy. When the number of errors 
is 1, a frequency-halved timing clock signal Sti is 
selected as the permission signal Sy. When the number 
45 Ne of errors is 2, a frequency-quartered timing signal 
St2 is selected as the permission signal 87. In short, the 
frequency or cycle of the permission signal Sj is con- 
trolled in accordance with the number of events of non- 
coincidence in comparison results. 
50 In this example, the maximum countable number of 
errors is 3 because the counter 505 is a 2-bit counter. 
The countable number of en-ors can be increased by 
increasing the number of bits of the counter 505 and the 
kinds of signals generated by the counter 502 and the 
55 logic circuit 503. i.e.. the kinds of different frequencies. 
In general, N (N is an integer) frequency dividers having 
different divisors may be used to produce N clock sig- 
nals 8to-8tn having different frequencies. And a selec- 
tor selects one from the N clock signals as the 
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permission signal Sj Further, the circuit configuration of 
FIG. 9 can easily be implemented by using a known 
DSP (digital signal processor), a CPU (central process- 
ing unit), or the like. 

As shown in FIG. 11, where circuit blocks similar to 
those previously described with reference to FIG. 9 are 
denoted by the same reference numerals, a processor 
(or a logic circuit) 506 may be used to control the selec- 
tor 504 t>ased on the number of errors. For example, 
this configuration can accommodate a case where the 
numbef of errors exceeds an allowable range. Spe- 
crttcaiiy. the checking operation may be suspended 
wr>en the number of errors exceeds an allowable 
range, for instance, 0 ^ ^ 8. 

I! lb posbibie to make a password harder to break by 
ludking ttie relationship between the number of 
errois and the permission signal generation interval 
mofe complex by means of the processor 506. Specifi- 
cally, random numbers are generated by the processor 
506 m accordance with the number of errors, to 
cause the selector 504 to select the cycles of the clock 
signals randomly In this case, since the frequency of 
the permission signal Sj is randomly varied in accord- 
ance With random numbers, it becomes more difficult to 
break the password. 

Although in the above embodiments the password 
is assumed to be a single-digit number for convenience 
of description, it is apparent that the invention can be 
applied to a case where the password Is a number of 
two or more digits. In the latter case, the embodiments 
may be adapted such that the entire input password is 
compared with the entire password that is stored in 
advance in the memory. 

Furthermore, the check permitting section 102 as 
shown in FIG. 1 may be composed of delay flip-flop cir- 
cuits which use the permission signal Sj as a timing 
clock. The lock release permitting section 304 as shown 
in FIG. 5 may be composed of an AND gate inputting 
the permission signal Sj and the comparison result. 
Needless to say. the configuration consisting of the 
check permitting section 102, the checking section 103. 
the lock controller 105 and the permission signal gener- 
ator 107 may be implemented by a program-controlled 
processor (DSP or CPU). Similarly, the configuration 
consisting of the checking section 302. the lock release 
permitting section 304, the lock controller 305 and the 
.permission signal generator 307 may be implemented 
by a program-controlled processor (DSP or CPU). 

As described above, according to the present 
invention, the interval between checking operations or 
the interval between lock release permitting operations 
is elongated in accordance with the number of events of 
non-coincidence in password comparison results. 
Therefore, even if all possible passwords are input, coin- 
cidence does not occur. This provides an advantage 
that a password is not easily broken even with the use of 
a computer or the like. Further, according to the inven- 
tion, the password input function is not locked. This pro- 
vides another advantage that even after input of a 



wrong password, the lock of a system can still be 
released by inputting a registered password. 

Claims 

5 

1. A system for providing authorization by checking 
whether input information (PW|n) is coincident with 
predetermined information (PWreg)* characterized 
by: 

10 

a first controller (107, 307) for varying permis- 
sion timing based on a check result (Scomp) 
the Input information; and 
a second controller (102-105. 302-305) for pro- 
75 viding the authorization when the check result 

indicates coincidence at the permission timing. 

2. The system according to claim 1 . wherein the first 
controller elongates an interval of the permission 

20 timing based on the check result of the input infor- 
mation. 

3. The system according to claim 2, wherein the first 
controller elongates the interval of the permission 

25 timing as the number of check results indicating 
non-coincidence increases. 

4. The system according to claim 1 , wherein the first 
controller randomly varies an interval of the permis- 

30 sion timing based on the check result of the input 
information. 

5. The system according to any of claims 1 -4. wherein 
the second controller comprises: 

35 

a check timing controller (102) for controlling 
check timing of the input information according 
to the permission timing; and 
a controller (105) for providing the authoriza- 
40 tion when receiving the check result indicating 

coincidence. 

6. The system according to any of claims 1 -4, wherein 
the second controller comprises: 

45 

a timing controller (304) for controlling timing of 
the authorization according to the permission 
timing; and 

a controller (305) for providing the authoriza- 
50 tion when receiving the check result indicating 

coincidence at the timing of the authorization. 

7. An identification system for providing authorization 
based on input information (PWi^). characterized 

55 by: 

an information checker (103, 104, 302. 303) for 
comparing the input information with predeter- 
mined information (PWreq) produce a com- 



7 



SDOCID: <EP 080921 7 A2 I > 



13 



EP0 809 217 A2 



0 



8. 



parison result (Scomp) indicating one of 
coincidence and non-coincidence, 
a timing generator (107. 307) for generating a 
permission signal (Sj) with varying a genera- 
tion Interval of the permission signal based on 
the comparison result; and 
a controller (102. 105. 304. 305) for providing 
the authorization based on both the permission 
signal and the comparison result. 

The identification system according to claim 7. 
wherein 

the Information checker produces the compari- 
son result in response to the permission signal 
received from the timing generator and 
the controller provides the authorization when 
receiving the comparison result indicating coin- 
cidence from the Information checker. 

9. The identification system according to claim 8. 
wherein the information checker comprises; 

a check permitting gate (102) for supplying the 
input information to the information checker in 
response to the permission signal received 
from the timing generator; and 
a comparator (103) for comparing the irput 
information with the predetermined information 
to produce the comparison result. 

10. The Identification system according to claim 7, 
wherein the controller provides the authorization 
when receiving the permission signal received from 
the timing generator while the comparison result 
Indicating coincidence. 

11. The Identification system according to claim 10. 
wherein the controller comprises: 



10 



15 



20 



25 



40 

a release permitting gate (304) for transferring 
the comparison result received from the Infor- 
mation checker in response to the permission 
signal received from the timing generator; and 
a lock controller (305) for providing authoriza- 45 
tion of lock release when receiving the compar- 
ison result indicating coincidence from the 
release permitting gate. 

12. The Identification system according to claim 8 or so 
10. wherein the timing generator elongates the gen- 
eration Interval of the permission signal based the 
comparison result of the input information. 

13. The identification system according to claim 12. 55 
wherein the timing generator elongates the genera- 
tion Interval of the permission signal as the number 
of comparison results indicating non-coincidence 
increases. 



14. The identification system according to claim 8 or 
10. wherein the timing generator randomly varies 
the generation Interval of the permission signal 
based the comparison result of the input Informa- 
tion. 

1 5. The identification system according to any of claims 
7 to 14. wherein the timing generator comprises: 

a reference oscillator (501) for generating a ref- 
erence clock signal; and 
a frequency controller (502-506. 601) for vary- 
ing a frequency of the reference clock signal 
received from the reference oscillator to gener- 
ate the permission signal based on the com- 
parison result. 

16. The identification system according to claim 15, 
wherein the frequency controller comprises: 

a frequency divider (502. 503, 601) for generat- 
ing a plurality of clock signals from the refer- 
ence clock signal, the clock signals having 
different frequencies; 

a counter (505) for counting comparison results 
indicating non-coincidence to produce a non- 
coincidence count; and 

a selector (504) for selecting one from the clock 
signals as the permission signal based on the 
50 non-coincidence count. 

17. The identification system according to claim 16. 
wherein the selector selects a clock signal having a 
lower frequency as the non-coincidence count 

35 Increases 

18. The identification system according to claim 16, 
wherein the selector randomly selects one from the 
clock signals as the permission signal based on the 
non-coincidence count. 

19. A method for providing authorization by checking 
whether input information is coincident with prede- 
termined information, characterized by the steps of: 

varying permission timing based on a check 
result of the input information; and 
providing the authorization when the check 
result indicates coincidence at the permission 
timing. 

20. A method for providing authorization based on input 
information, characterized by the step of: 

comparing the input information with predeter- 
mined information to produce a comparison 
result indicating one of coincidence and non- 
coincidence, 

generating a permission signal with varying a 
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generation interval of the permission signal 
based on the comparison result; and 
providing the authorization based on both the 
permission signal and the comparison result. 
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FIG. 2 
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FIG. 6 
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(54) Secret information indentification system 

(57) In a secret information identification system, an 
input password (PW|n) is compared with a registered 
password (PWreq) every time a permission signal (Sj) 
is generated. Lock release permission is given when a 
comparison result (ScoMP) indicates coincidence. Alter- 
natively, an input password is compared with a regis- 
tered password and lock release permission is given 
every time a permission signal is generated when the 



comparison indicates coincidence. The cycle of genera- 
tion of the permission signal is elongated as the number 
of events of non-coincidence in comparison results 
increases. As a result, the password is not easily bro- 
ken, and further the password input function is not 
locked even after input of a wrong password. 
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